Commit Graph
32011 Commits
Author SHA1 Message Date
wanckl 973c1b4f9a fix(driver_twai): improve new driver API description 2025-12-23 16:10:01 +08:00
diplfranzhoepfinger 4f1cf6a5d2 chor(twai): improve error logging in _node_queue_tx function
Enhanced error message for unmatched dlc and buffer_len.

Merges https://github.com/espressif/esp-idf/pull/17888
2025-12-23 16:09:39 +08:00
Chen Jichang 3678a25e4c fix(gdma): fix set dma burst size failure on p4 v3.0 2025-12-23 11:22:47 +08:00
Song Ruo Jing d6fbe418c6 fix(ppa): fix SRM YUV422/420 incorrect DMA descriptor port mode block size 2025-12-22 16:09:06 +08:00
Song Ruo Jing 1b13ef0498 fix(ppa): fix potential SRM operation stuck on DMA issue
Apply a workaound to bypass macro block order function in PPA SRM
when specific conditions are met to avoid SRM operation getting stuck
2025-12-22 16:09:06 +08:00
Song Ruo Jing 507bea72e7 fix(ppa): YUV444 cannot be a PPA SRM output color mode 2025-12-22 16:09:06 +08:00
Jin Cheng 66b2214a0d fix(bt/bluedroid): cleaned the code according to the tool cppcheck 2025-12-19 16:56:25 +08:00
Jin Cheng cf5a568dc0 fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received 2025-12-19 16:52:31 +08:00
Jin Cheng 8fe4c35994 fix(bt/bluedroid): drop connection when atttempting to disable encryption 2025-12-19 16:52:31 +08:00
Jin Cheng 991486fa02 fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd 2025-12-19 16:52:31 +08:00
Jin Cheng fa22e34f56 fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl 2025-12-19 16:52:31 +08:00
Jin Cheng 5872a8cccb fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej 2025-12-19 16:52:31 +08:00
Jin Cheng f7c0f92556 fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete 2025-12-19 16:52:31 +08:00
Jin Cheng 514bcb41a2 fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete 2025-12-19 16:52:31 +08:00
Jin Cheng 04219e5fd4 fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete 2025-12-19 16:52:31 +08:00
Jin Cheng 08a593d801 fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete 2025-12-19 16:52:31 +08:00
Jin Cheng a73e2e4d6c fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete 2025-12-19 16:52:31 +08:00
Jin Cheng 5a2b29fe82 fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute 2025-12-19 16:52:31 +08:00
Jin Cheng 3ec5f615ae fix(bt/bluedroid): report failure when not able to connect to AVRCP 2025-12-19 16:52:31 +08:00
Jin Cheng 56756b1b5d fix(bt/bluedroid): fixed buffer overflow in BRSF 2025-12-19 16:52:31 +08:00
Jin Cheng 11eea1b4de fix(bt/bluedroid): added negative length check in process_service_search_rsp 2025-12-19 16:52:31 +08:00
Jin Cheng be25062b0d fix(bt/bluedroid): fixed OOB read in SDP server continuation length 2025-12-19 16:52:31 +08:00
Jin Cheng 4df287c536 fix(bt/bluedroid): added length check when copy AVDTP packet 2025-12-19 16:52:31 +08:00
Jin Cheng 6a497ad921 fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET 2025-12-19 16:52:31 +08:00
Jin Cheng 019516284f fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item 2025-12-19 16:52:31 +08:00
Jin Cheng 158519cf8c fix(bt/bluedroid): added boundary check when reading SDP attribute response packet 2025-12-19 16:52:31 +08:00
Jin Cheng 173747750d fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp 2025-12-19 16:52:31 +08:00
Jin Cheng 4cb6ccc6f6 fix(bt/bluedroid): fixed potential OOB read in the reporting handler
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 16:52:31 +08:00
Jin Cheng f15fe75f24 fix(bt/bluedroid): fixed a potential overflow about the media payload offset
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 16:52:31 +08:00
Jin Cheng 15e0c748e5 fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open 2025-12-19 16:52:31 +08:00
Jin Cheng 70f82a5607 fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected 2025-12-19 16:52:31 +08:00
Jin Cheng 5b7c17cfc7 fix(bt/bluedroid): reject device with same address in legacy paring 2025-12-19 16:52:31 +08:00
Jin Cheng 0fc2109ec7 fix(bt/bluedroid): ignore AVCT commands that are too long 2025-12-19 16:52:31 +08:00
Jin Cheng 9095d1cd25 fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP 2025-12-19 16:52:31 +08:00
Jin Cheng 0f1c203e12 fix(bt/bluedroid): make sure SDP only start discovery once 2025-12-19 16:52:31 +08:00
Jin Cheng 1ba8aaaff8 fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write 2025-12-19 16:52:31 +08:00
Jin Cheng 33af3a0aa6 fix(bt/blurdoird): check Classic key before cross-key derivation 2025-12-19 16:52:31 +08:00
Jin Cheng e7e0be698a fix(bt/blurdoird): enable bitpool snity checks 2025-12-19 16:52:31 +08:00
nilesh.kale 88fe9e436d fix(esp_https_ota): align OTA resumption offset to 16-byte boundary 2025-12-18 19:09:56 +08:00
nilesh.kale 943b853746 Revert "fix: add check to ensure OTA buffer size for 16-byte aligned"
This reverts commit 873fd18c5a.
2025-12-18 19:09:56 +08:00
Zhou Xiao 7e93257ed1 fix(ble): added missed spin lock initialization
(cherry picked from commit 069262e513)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2025-12-18 17:13:38 +08:00
zhuanghang 5d8104a6a2 feat(802.15.4): Update the 'ieee802154_get_recent_rssi' API to obtain real-time RSSI 2025-12-18 16:34:42 +08:00
Jiang Jiang Jian e0577ae677 Merge branch 'fix/fix_esp32s2_phy_issue_v55' into 'release/v5.5'
fix(phy): fix esp32s2 phy lib issue v55

See merge request espressif/esp-idf!44341
2025-12-18 15:48:01 +08:00
Island 8789584388 Merge branch 'bugfix/bug_ble_max_device_record_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed BLE incorrect device record count issue (v5.5)

See merge request espressif/esp-idf!43597
2025-12-18 14:29:52 +08:00
Island a63ae743b1 Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v5.5)

See merge request espressif/esp-idf!44251
2025-12-18 14:26:44 +08:00
Island 5cf7ec68bc Merge branch 'bugfix/fix_ble_security_issue_2025_v5.5' into 'release/v5.5'
Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd (v5.5)

See merge request espressif/esp-idf!43807
2025-12-18 14:25:15 +08:00
Island 51493f9445 Merge branch 'bugfix/fix_reattempt_sync_estab_v5.5' into 'release/v5.5'
fix(nimble): Add change to cancel sync in case of reattempt (v5.5)

See merge request espressif/esp-idf!43949
2025-12-18 14:21:18 +08:00
Jiang Jiang Jian f230471ee6 Merge branch 'bugfix/fix_esp32_coex_cache_disable_crash_v5.5' into 'release/v5.5'
fix(coex): fix esp32 coex crash issue v5.5

See merge request espressif/esp-idf!44288
2025-12-18 14:05:52 +08:00
Jiang Jiang Jian 2a039e30d4 Merge branch 'bugfix/fix_bt_4205_v5.5' into 'release/v5.5'
Fixed BLE assert lld_con.c 1479 on ESP32-C3 and ESP32-S3(5106725) (v5.5)

See merge request espressif/esp-idf!44328
2025-12-18 13:59:23 +08:00
wangtao@espressif.com c8ba727536 fix(phy): fix esp32s2 phy lib issue 2025-12-17 20:36:28 +08:00